assuredworkloads-environment-assessor agent skill by google

At a glance

Before you install

Read from the skill's files at the directory's October 19, 2026 snapshot: what ships with it, what its code reads, and the terms it is published under.

• Bundled scripts: 2 script files (2 Python). Your agent may run them, so read them first.
• License: Apache-2.0, an open-source or open-content license.

Install assuredworkloads-environment-assessor

The skills CLI works with Claude Code, Codex, Cursor and other agents; the other routes copy the folder by hand.

npx skills add https://github.com/google/skills/tree/main/skills/cloud/assuredworkloads-environment-assessor

tmp="$(mktemp -d)"
git clone --depth 1 https://github.com/google/skills.git "$tmp/repo"
mkdir -p .claude/skills
cp -R "$tmp/repo/"skills/cloud/assuredworkloads-environment-assessor .claude/skills/
rm -rf "$tmp"

python3 ~/.codex/skills/.system/skill-installer/scripts/install-skill-from-github.py \
    --repo google/skills \
    --path skills/cloud/assuredworkloads-environment-assessor

google/skills is third-party code. Read SKILL.md and any bundled scripts before you install it.

How the author describes it

Discover Google Cloud resource telemetry and effective Org Policies, evaluate brownfield workloads against sovereign data boundary and compliance standards (EU Data Boundary with Support, FedRAMP Moderate/High, DoD IL4/IL5, ITAR, CJIS, US/EU Regional Data Boundaries), and recommend the optimal Assured Workloads Framework. Use when asked to: "assess my environment for compliance", "which Assured Workloads framework should I use?", "check if my folder is ready for EU sovereignty", "evaluate compliance posture for folders/123 or projects/xyz", or "discover compliance gaps before deployment". Do NOT use for live mutating policy deployments, generating deep audit reports via Cloud Audit Manager, generating remediation scripts, or authoring custom Assured Workloads frameworks.

From the description field of SKILL.md. Agents read this line to decide when to load the skill.

Sections in SKILL.md

• Safety & Execution Tier (CRITICAL)
• Grounding Guardrails: Google Cloud & Assured Workloads Precedence (CRITICAL)
• Prerequisites
• Step-by-Step Operating Workflow
• Step 1: Ingest Scope & Resolve Organization ID
• Step 2: Ingest Asset Telemetry & Effective Org Policies via Two-Pass Telescoping Protocol
• Step 3: Fetch & Cache Built-In Framework Catalog and Filter by Location + SUR
• Step 4: Conditional Pass 2 CMEK Ingestion & Org Policy Evaluation
• Step 5: Render Executive Assessment Report (Minto Pyramid Structure)
• Step 6: Handling Customer Follow-Up Questions on Specific Services
• Failure Modes & Error Recovery Playbook

Files in the skill folder

• SKILL.md
• references/gcloud-commands.md
• scripts/evaluate_control_rules.py
• scripts/validate_workload_payload.py

Suede Skill Check: 90/100 · A

assuredworkloads-environment-assessor passes the required frontmatter check and all seven graded checks, which cover the SKILL.md format, a declared license and a commit in the last year. Those checks earn 56 of the score’s points; the rest come from description quality, instruction depth, bundled files, maintenance and curated-list citations. How the score works.

Where this skill is cited

google/skills appears in 2 curated lists: VoltAgent/awesome-agent-skills, skillmatic-ai/awesome-agent-skills.

More security skills

All security skills

More from google/skills

All 163 skills in google/skills